<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: arcadia-technology-llc-crafty-controller</title><description>Every new CVE for arcadia-technology-llc-crafty-controller.</description><link>https://agentprime.io/</link><item><title>CVE-2026-18516: Improper Encoding or Escaping of Output in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2026-18516/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18516/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 13:37:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-90821: Improper Neutralization of Input During Web Page Generation (&apos;Cross-site Scripting&apos;) in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2026-90821/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90821/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 13:37:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13716: Path Traversal: &apos;.../...//&apos; in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2026-13716/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13716/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 06:05:12 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-5652: Authorization Bypass Through User-Controlled Key in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2026-5652/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5652/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Apr 2026 16:33:56 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-0805: Improper Limitation of a Pathname to a Restricted Directory (&apos;Path Traversal&apos;) in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2026-0805/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0805/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Jan 2026 06:04:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-0963: Improper Limitation of a Pathname to a Restricted Directory (&apos;Path Traversal&apos;) in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2026-0963/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0963/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Jan 2026 06:04:05 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-14700: Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2025-14700/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14700/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 00:04:37 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-14701: Improper Neutralization of Input During Web Page Generation (&apos;Cross-site Scripting&apos;) in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2025-14701/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14701/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 00:04:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-5990: Improper Neutralization of Input During Web Page Generation (&apos;Cross-site Scripting&apos;) in Crafty Controller</title><link>https://agentprime.io/advisories/CVE-2025-5990/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-5990/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 15 Jun 2025 18:01:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1064: Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4</title><link>https://agentprime.io/advisories/CVE-2024-1064/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1064/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Feb 2024 09:02:20 GMT</pubDate><category>CVE</category></item></channel></rss>